awesome llvm security [Welcome to PR]

A SOCKS proxy written in Python that randomizes your source IP address. Round-robin your evil packets through SSH tunnels or give them billions of unique source addresses!

A simple virtual machine - compiler & interpreter - written in golang

Threadless Process Injection using remote function hooking.

macOS Malware Collection

Curated list of awesome browser automation tools and resources

Ansible build for Afl++ Frida-Mode

Exploit for CVE-2019-9810 Firefox on Windows 64-bit.

A list of awesome Reth-related resources

Self-contained exploit for CVE-2021-4034 - Pkexec Local Privilege Escalation

DOMPurify - a DOM-only, super-fast, uber-tolerant XSS sanitizer for HTML, MathML and SVG. DOMPurify works with a secure default, but offers a lot of configurability and hooks. Demo:

OWASP Foundation Web Respository

OWASP Machine Learning Security Top 10 Project

Scaling best-practice AFLPlusPlus fuzzing campaigns made easy and more

Microsoft-Outlook-Remote-Code-Execution-Vulnerability

background code checker

Algebraic enhancements for GEMM & AI accelerators

🔍 A Hex Editor for Reverse Engineers, Programmers and people who value their retinas when working at 3 AM.

Data Science Roadmap from A to Z

A memory arena implementation for Go.

Chrowned by an Extension: Exploiting the Chrome DevTools Protocol

A collection of my Semgrep rules to facilitate vulnerability research.

Academic papers related to fuzzing, binary analysis, and exploit dev, which I want to read or have already read

Awesome EDR Bypass Resources For Ethical Hacking

Fuzz iOS URL schemes

Binary instrumentation framework based on FRIDA

🍀 Evolutionary optimization library for Go (genetic algorithm, partical swarm optimization, differential evolution)

pwninit - automate starting binary exploit challenges

Defund the Police.